CVE-2010-4539

EUVD-2010-4505
The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote authenticated users to cause a denial of service (NULL pointer dereference and daemon crash) via vectors that trigger the walking of SVNParentPath collections.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:N/I:N/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
Affected Products (NVD)
VendorProductVersion
apachesubversion
𝑥
≤ 1.6.14
apachesubversion
0.6
apachesubversion
0.7
apachesubversion
0.8
apachesubversion
0.9
apachesubversion
0.10.0
apachesubversion
0.10.1
apachesubversion
0.10.2
apachesubversion
0.11.1
apachesubversion
0.12.0
apachesubversion
0.13.0
apachesubversion
0.13.1
apachesubversion
0.13.2
apachesubversion
0.14.0
apachesubversion
0.14.1
apachesubversion
0.14.2
apachesubversion
0.14.3
apachesubversion
0.14.4
apachesubversion
0.14.5
apachesubversion
0.15
apachesubversion
0.16
apachesubversion
0.16.1
apachesubversion
0.17.0
apachesubversion
0.17.1
apachesubversion
0.18.0
apachesubversion
0.18.1
apachesubversion
0.19.0
apachesubversion
0.19.1
apachesubversion
0.20.0
apachesubversion
0.20.1
apachesubversion
0.21.0
apachesubversion
0.22.0
apachesubversion
0.22.1
apachesubversion
0.22.2
apachesubversion
0.23.0
apachesubversion
0.24.0
apachesubversion
0.24.1
apachesubversion
0.24.2
apachesubversion
0.25.0
apachesubversion
0.26.0
apachesubversion
0.27.0
apachesubversion
0.28.0
apachesubversion
0.28.1
apachesubversion
0.28.2
apachesubversion
0.29.0
apachesubversion
0.30.0
apachesubversion
0.31.0
apachesubversion
0.32.1
apachesubversion
0.33.0
apachesubversion
0.33.1
apachesubversion
0.34.0
apachesubversion
0.35.0
apachesubversion
0.35.1
apachesubversion
0.36.0
apachesubversion
0.37.0
apachesubversion
1.0.0
apachesubversion
1.0.1
apachesubversion
1.0.2
apachesubversion
1.0.3
apachesubversion
1.0.4
apachesubversion
1.0.5
apachesubversion
1.0.6
apachesubversion
1.0.7
apachesubversion
1.0.8
apachesubversion
1.0.9
apachesubversion
1.1.0
apachesubversion
1.1.1
apachesubversion
1.1.2
apachesubversion
1.1.3
apachesubversion
1.1.4
apachesubversion
1.2.0
apachesubversion
1.2.1
apachesubversion
1.2.2
apachesubversion
1.2.3
apachesubversion
1.3.0
apachesubversion
1.3.1
apachesubversion
1.3.2
apachesubversion
1.4.0
apachesubversion
1.4.1
apachesubversion
1.4.2
apachesubversion
1.4.3
apachesubversion
1.4.4
apachesubversion
1.4.5
apachesubversion
1.4.6
apachesubversion
1.5.0
apachesubversion
1.5.1
apachesubversion
1.5.2
apachesubversion
1.5.3
apachesubversion
1.5.4
apachesubversion
1.5.5
apachesubversion
1.5.6
apachesubversion
1.5.7
apachesubversion
1.5.8
apachesubversion
1.6.0
apachesubversion
1.6.1
apachesubversion
1.6.2
apachesubversion
1.6.3
apachesubversion
1.6.4
apachesubversion
1.6.5
apachesubversion
1.6.6
apachesubversion
1.6.7
apachesubversion
1.6.8
apachesubversion
1.6.9
apachesubversion
1.6.10
apachesubversion
1.6.11
apachesubversion
1.6.12
apachesubversion
1.6.13
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
subversion
bookworm
1.14.2-4
fixed
bullseye
1.14.1-3+deb11u1
fixed
bullseye (security)
1.14.1-3+deb11u1
fixed
lenny
no-dsa
sid
1.14.4-2
fixed
trixie
1.14.4-2
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
subversion
dapper
Fixed 1.3.1-3ubuntu1.3
released
hardy
Fixed 1.4.6dfsg1-2ubuntu1.2
released
karmic
Fixed 1.6.5dfsg-1ubuntu1.1
released
lucid
Fixed 1.6.6dfsg-2ubuntu1.1
released
maverick
Fixed 1.6.12dfsg-1ubuntu1.1
released
Common Weakness Enumeration
References